by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 25 Sep 2017 15:22:53 -0700
Received: from mail-db5eur01hn0210.outbound.protection.outlook.com ([104.47.2.210]:10688 helo=EUR01-DB5-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dwbm4-0005NW-2p
for ; Mon, 25 Sep 2017 15:22:53 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mailaub.onmicrosoft.com; s=selector1-mail-aub-edu;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=mt0flKIJPrILUHltEaBBDtOizNgeOYG+CmIJ/kbYE58=;
b=ToX4dqLo2HYA4a+L9Q3XrCUdix5cjDZaUlKLonlSifp/NSb2Imot8AZFeERLTApkTOR23k1WbOPQvZcMB5igSSeh2wfdZmlbhDDvVDfZOcTDnTt6om5pgMugSAzuXAUD62NgqPqPNBzxL33zdRsYVtNjmwli8vRMV8t7/1z8WK0=
Received: from DB6PR0601CA0022.eurprd06.prod.outlook.com (2603
4:7b::32)
by HE1PR0601MB2586.eurprd06.prod.outlook.com (26033:53::14) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.77.7; Mon, 25 Sep
2017 22:22:01 +0000
Received: from DB5EUR03FT032.eop-EUR03.prod.protection.outlook.com
(2a01:111:f400:7e0a::209) by DB6PR0601CA0022.outlook.office365.com
(26034:7b::32) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.56.8 via Frontend
Transport; Mon, 25 Sep 2017 22:22:01 +0000
Authentication-Results: spf=softfail (sender IP is 193.188.128.10)
smtp.mailfrom=mail.aub.edu; carpetconnectionpc.com; dkim=none (message not
signed) header.d=none;carpetconnectionpc.com; dmarc=none action=none
header.from=aub.edu.lb;
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
mail.aub.edu discourages use of 193.188.128.10 as permitted sender)
Received: from mail.aub.edu.lb (193.188.128.10) by
DB5EUR03FT032.mail.protection.outlook.com (10.152.20.162) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.20.56.11 via Frontend Transport; Mon, 25 Sep 2017 22:22:00 +0000
Received: from [188.30.101.158] (188.30.101.158) by SVEN.win2k.aub.edu.lb
(193.188.128.41) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 26 Sep
2017 01:21:31 +0300
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: Whipple Alec D <[email protected]>
Date: Mon, 25 Sep 2017 23:21:27 +0100
Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Originating-IP: [188.30.101.158]
X-EOPAttributedMessage: 0
X-Forefront-Antispam-Report:
CIP:193.188.128.10;IPV:NLI;CTRY:LB;EFV:NLI;SFV:SPM;SFS:(10019020)(6009001)(376002)(39860400002)(346002)(2980300002)(199003)(189002)(54356999)(75432002)(8936002)(305945005)(6200100001)(786003)(8746002)(6862004)(6706004)(316002)(562354002)(189998001)(42882006)(246002)(16526017)(16576012)(7116003)(7416002)(356003)(6666003)(478600001)(53256004)(558084003)(104016004)(8676002)(5660300001)(74482002)(2906002)(47776003)(106466001)(7736002)(24736003)(88552002)(50986999)(23756003)(43066003)(50466002)(66066001)(2171002)(6116002)(250100001)(105596002)(33646002)(108616004)(3846002)(62346012);DIR:OUT;SFP:1501;SCL:5;SRVR:HE1PR0601MB2586;H:mail.aub.edu.lb;FPR:;SPF:SoftFail;PTR:keys.aub.edu.lb;A:1;MX:1;LANG:en;
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03FT032;1:Ni2n/oSHpbowalmpG6Xku7AT/sbC99E5dHsVmUcjpNgxumyWyj8yNNFmKObTdrRHEUOZijVR0vhIbBd4JEts3iKdYc+hejNKm/Axu9Xhjena/hwkzvFPuGp3V30cv+rd
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 48f71401-4736-4ecb-8b39-08d50463d7db
X-Microsoft-Antispam:
UriScan:;BCL:0;PCL:0;RULEID:(22001)(2017030254152)(2017052603199)(201703131423075)(201703031133081)(201702281549075);SRVR:HE1PR0601MB2586;
X-Microsoft-Exchange-Diagnostics:
1;HE1PR0601MB2586;3:jO7hZtY1ByOw24tmbJC2Dek0IDlKXAByEy1rscudJ3ucaD6hTsaPtGA+YuZ/AEJ6wPwwGNv46ON56BxneniNZwsjPfdwffrwTOO8hOh52YY2s0zprb1voBap/Xz+Xn/IowvDmUM/TURmWiBf5ha+n15WqFkK8w/5EI4irUUx0x9UGd80V9R7m9kCO8oeGTKpsfnX8MUBbLd4fOnMSf4KNCaxqaXK579Xeagute1mb0Tqm/06yoRXHgvvnP2vu4zeqdjvO+uIwUqDycvXcKRL+/8PCGLcGOwmzBcGOR9HOVKpghr8S0G4BshR3TZ6ndrmwtCSKWBfgPWBwWcLB2VS4VGMuXdK9LJHuA8/92yjn8M=;25:wQo1O5gHEI7daQsjlIA2K+ig6O9MAT8RCEQsYXjMKtp5GUf/qnTwdKnI6qy3mOA0hXb63LOxGKjznYLJ9CijqG2WgT8aAiDRhiA+ZRS21kk1BLmR7wz3bgMlYQM3xkMUrFT+ecyB+EUM742rtGIVfRL5L71BXyQ9xPXx3WrMZDDRdw4JHkd7klpuHtldEyep5FxXqqbCZvQQTIUJFxZzFfbmpyGoprvqt4ageK1pBkL50qAiXgeitmmZDrEjX6QDBpmYbvkVQ0Oy7+2QruNMC3p94Vz6G1KFC4DVA0anQ+O00hp5bAxDNMtnJgCbGWAYW928o1cL5S1poWyFL9s2Lg==
X-MS-TrafficTypeDiagnostic: HE1PR0601MB2586:
X-Microsoft-Exchange-Diagnostics:
1;HE1PR0601MB2586;31:ng1IGuwiwY/jRuA7ilTVdDAgFp2ihARu6FDLrDMwqAdpdpD1+Dw2rcCHzv+GCRECe9VpaSmDWNbVdAadCqcXZeEB9Q41Cq6NO2yuFbXrt/a93ip9357kmT1MyqgcojHrhDuhGot3a+cYUBSwEaDlBh5BMZPeuqXQhSNXF2U0l18EpYItr2+vveKdQIqWFfaQLU1g/GNEpFjg+bZzVAymAQnR1e7RmjJogGQJuprrQ2o=;20:lL+wvYjjAygZfacQlLpmou8gCE1Du1eV0DSD1gOfajn74tUBcezK5KmwVBbBtZ2PiKLykB2PYQdF7x6rKfW8C5kPLHfz5UPTK+fE/nwuywYWkf44RJ1aUWnd8GcoyERgSbr7gRMY1Dsvqel1GpQwVB7OnKq7gx+qaBkM5HhqXdTxuZ13uEV+V/0zHFde3yJ6JrekadrkDP2AIoCrb52XDbMwv/SKQpIgHq/Ivgd0iK4JzjrRWKkg48tcpVF9I/CRNnYADq81VhLmfrD7eIGfB+aEsGzZUUDkGdgl8Qtauy7s6Snv8vWPhRIkLSQDacMrR+VDQy5Y7u4cUhZvY8vCdr074Z62Hh7NyZgyo7kmfatmWgcgGmK9lLUsisnXRj1vvkEX7rW3HQYreuVUlamiVZXBtdN5ktXZmjY5DSQFPUAPgokgzvCtsJXQKF/tD1YHnOOkwCOlHKTBff3SopWfCYVmbG9j6tDbzhxS2qeLhv0g9fGHSfVbyMvDlnvDKiTa
X-Exchange-Antispam-Report-Test: UriScan:;
X-Microsoft-Antispam-PRVS:
<HE1PR0601MB258675F41D16BDFBEFED0E10AC7A0@HE1PR0601MB2586.eurprd06.prod.outlook.com>
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(100000703101)(100105400095)(93006095)(93003095)(10201501046)(3002001)(6041248)(20161123562025)(20161123555025)(20161123560025)(20161123564025)(20161123558100)(201703131423075)(201702281529075)(201702281528075)(201703061421075)(201703061406153)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:HE1PR0601MB2586;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:HE1PR0601MB2586;
X-Microsoft-Exchange-Diagnostics:
1;HE1PR0601MB2586;4:fBRQl4i9LWF1Zm+rRC8bdljWUT9GFsbQAAOH/O2j2cS5LQsSIlBE5AlyL13K31I+9S2RJzHEfaTH3wh3ja2vlERTq3/bEyB17bHcBPtzRHQTisrV8FeBLtVd/+Vo4LTpWm2iopDc+3t2PFi8yPDS7Xf34YVgt5Y2jAP4ekkAV2n1kIvaAdeylZBQM6HGf57A2quUxoNTs13n6D2M2jwbhnqtmxrIZ3VH0myauCyDSuCBa8UpWONjfNbi6diMexca
X-Forefront-PRVS: 04410E544A
X-Microsoft-Exchange-Diagnostics:
=?iso-8859-1?Q?1;HE1PR0601MB2586;23:zfcivj/0kuvNW7GdL7JP5puxA2wl315CMTGL5?=
=?iso-8859-1?Q?WkluOncyRClEnti56GCCyCaXUDNVBqig+3WV+7jXuiH4qogr4oNAp92Scn?=
=?iso-8859-1?Q?wGOg1D5WVLjxz7VUcIe6ag6FSozzxBetu7jl4wn7aT8XDbxgJsbuffptww?=
=?iso-8859-1?Q?iV5lJhY8goNbtEqdUDjoaSRbDTngnIOl72yRdvJKbI/vPA6FDqnjIEqCgw?=
=?iso-8859-1?Q?08YE1bwGVDeuEO3vZ7X/mKzsxfwduybPaBY25ru8ZDosEhLKUFx4yoEnTK?=
=?iso-8859-1?Q?EVvxKUSdWhoaLZCFjSYQyEk49rnLfyHnHkcR5WalWcXZ6dw+QvBGV+cAem?=
=?iso-8859-1?Q?quFrScQwoUa8V9tRMJ9+Q8/42TmiIQxtugMUV3W4tz4YUg08Uc7uHfi0zi?=
=?iso-8859-1?Q?X//gGvEH7rmHRJ7bJr12rkEx9kRZlFNetEtM4vddA2C3U6nUgnpe4pbrR8?=
=?iso-8859-1?Q?SOYyaNOV7P4wXWzV3gw47WLRW9JfAxLQi9JEmBqUkq9irzHiQwl7uTls4L?=
=?iso-8859-1?Q?yLRNWpSQ22+npiGjgJLkyjPPPcg7ZIS9cN7CL2aRwfGmq4uIQ2fr9g3N4F?=
=?iso-8859-1?Q?HYgvUoa7miUweEXyhXx4lMaCgf0/j4EqlIEPcPUfowOQnv0qhECBDJ6VoM?=
=?iso-8859-1?Q?JzI9WZF4TG3PSPR++ucB2Hu6AvUAFhHTb9wkqYipM36GQtCx8tBNu65E2A?=
=?iso-8859-1?Q?OEbIJrGcNtGTPcnTRWufZOas6cjiBIduC/VKlE58xaZPCXkK9aUKYoqnyW?=
=?iso-8859-1?Q?CP+WZvqTs8WtIFsvPuJ4CCmeyIhlj2xHzlRBZazPhq9OV25Tao+seIXXu3?=
=?iso-8859-1?Q?DyQD/I22q0D0oCKfJX/t03kNivCBFl5klZuYrP/72RlGoWPATET5fInnud?=
=?iso-8859-1?Q?RTV92A4q+0t/N6dB/06dmkv4JsRj3zYiiRO9sfCHJI5tl9Y+K3nrm09x29?=
=?iso-8859-1?Q?WWbr/EDn2n4CEx8wpEe5oMe8+RVv6u2tBr02/hKG6JSAutWRy10NGNnwwC?=
=?iso-8859-1?Q?DNJf9izgKGdACSdQ50cr0itvzhaAbLHTaLWp+SZtrq1QqsYk2vWmRNGlI8?=
=?iso-8859-1?Q?CyAPjrSehoQ6HXMsH5RHOiemTrbZhUoiYYLXxJG6JNXrEl3OXR+U5Hd3jm?=
=?iso-8859-1?Q?5GK/HP3Gif65Dcx/4mJZlHv/HbmLQj3/xl9CIrYWUAdFV+pqnbRDo6YQrg?=
=?iso-8859-1?Q?IypsOlfXpNHqjXRQbmIz+Z891FXUj3ryW5ED1efwY/lAbPhRUBwuSstDa7?=
=?iso-8859-1?Q?wqjiPX+Z29VMk0haM7WE1rX6agG2Bd/rH6n1u9VBYQnWrAiQ9ZPXwyWnDA?=
=?iso-8859-1?Q?cR54=3D?=
X-Microsoft-Exchange-Diagnostics:
1;HE1PR0601MB2586;6:wfhQt58AZkkBvUN0hwJLGT1VnQhsymKwMzmtEpLHsTouB9Ow7roCot1JLrWRbc47HNl/NituaTwZUNr7dwfNdVf3SvOaeMdP7/2mEaWDcmE2oFh2VfgiHpq/GO3QJzXNIirZ9eluEK9ILYtej9ubXEQ5+KZaZvwrkGI2cCe5wN3ux58jhQE5pGa2pcQmjB9Budt34quNK0EQLAURG51UP0gW0GGM4QtJ5QWWqtmq97im8cw3zgfC9GDppNx39MF+XvHcXX7lQNhvb9s4tmvZ8LeKC5NsZYHXplSpbh5XyD1PbeV1oFbT+/1sbzg3eVuJsHbH7eMU4JCV6QRrsEs4xA==;5:qwznnp0hz3veD/ynNrrGW249SZV1wISio8oofqIuadIo1Ik52yCbJy9rGK6Sf3dXZgakURhkhzRkwuKFQcpOhL9FceGDowJgwn2x7Cj94HErQtLB1FE42bTKrRxSGM5wQCOHO0m39YHcADE9a2Amyg==;24:VvbZem9K5wdncuihGuRXFYqGEVeejx11FMgJVlGJFOVFJKl2aFa0A0nkgnkCyFyJWVIKPJzMFG+Aa+Vy78THlg==;7:th/wswwYXqBs2/bArxBAhzjkGNDNEWLsLN3LEoTpZDOqZlmt6oqVbgAi3P/RoB74Vve8dGu12+SSXFrh4jCfSVSgGO8XQHgN3QdNbMtfOzjjGjqV8ADXLHEvQmZz5tzM+R7L6VJKA8PMwMeA8JHNgY5qB03D5Qj6de6pGNNH0WN0ZP15uIt0pRCjxuBVQtq6szDhGJDkE24ciIyJQKC/BUM01s5hzAy4t1kFIyQa3Hk=
SpamDiagnosticOutput: 1:22
X-OriginatorOrg: aub.edu.lb
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Sep 2017 22:22:00.9431
(UTC)
X-MS-Exchange-CrossTenant-Id: c7ba5b1a-41b6-43e9-a120-6ff654ada137
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c7ba5b1a-41b6-43e9-a120-6ff654ada137;Ip=[193.188.128.10];Helo=[mail.aub.edu.lb]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0601MB2586
X-Spam-Status: Yes, score=12.2
X-Spam-Score: 122
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: David & Maureen picked you for $850.000.00 Donation, Kindly
reply for details and claim. [...]
Content analysis details: (12.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[104.47.2.210 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.8 SUBJ_DOLLARS Subject starts with dollar amount
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[104.47.2.210 listed in dnsbl.sorbs.net]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** $850.000.00 Donation
David & Maureen picked you for $850.000.00 Donation, Kindly reply for details and
claim.
Envelope-to:
Delivery-date: Mon, 25 Sep 2017 15:22:53 -0700
Received: from mail-db5eur01hn0210.outbound.protection.outlook.com ([104.47.2.210]:10688 helo=EUR01-DB5-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dwbm4-0005NW-2p
for ; Mon, 25 Sep 2017 15:22:53 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mailaub.onmicrosoft.com; s=selector1-mail-aub-edu;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=mt0flKIJPrILUHltEaBBDtOizNgeOYG+CmIJ/kbYE58=;
b=ToX4dqLo2HYA4a+L9Q3XrCUdix5cjDZaUlKLonlSifp/NSb2Imot8AZFeERLTApkTOR23k1WbOPQvZcMB5igSSeh2wfdZmlbhDDvVDfZOcTDnTt6om5pgMugSAzuXAUD62NgqPqPNBzxL33zdRsYVtNjmwli8vRMV8t7/1z8WK0=
Received: from DB6PR0601CA0022.eurprd06.prod.outlook.com (2603
4:7b::32)by HE1PR0601MB2586.eurprd06.prod.outlook.com (2603
3:53::14) withMicrosoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.77.7; Mon, 25 Sep
2017 22:22:01 +0000
Received: from DB5EUR03FT032.eop-EUR03.prod.protection.outlook.com
(2a01:111:f400:7e0a::209) by DB6PR0601CA0022.outlook.office365.com
(2603
4:7b::32) with Microsoft SMTP Server (version=TLS1_2,cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.56.8 via Frontend
Transport; Mon, 25 Sep 2017 22:22:01 +0000
Authentication-Results: spf=softfail (sender IP is 193.188.128.10)
smtp.mailfrom=mail.aub.edu; carpetconnectionpc.com; dkim=none (message not
signed) header.d=none;carpetconnectionpc.com; dmarc=none action=none
header.from=aub.edu.lb;
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
mail.aub.edu discourages use of 193.188.128.10 as permitted sender)
Received: from mail.aub.edu.lb (193.188.128.10) by
DB5EUR03FT032.mail.protection.outlook.com (10.152.20.162) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.20.56.11 via Frontend Transport; Mon, 25 Sep 2017 22:22:00 +0000
Received: from [188.30.101.158] (188.30.101.158) by SVEN.win2k.aub.edu.lb
(193.188.128.41) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 26 Sep
2017 01:21:31 +0300
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: Whipple Alec D <[email protected]>
Date: Mon, 25 Sep 2017 23:21:27 +0100
Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Originating-IP: [188.30.101.158]
X-EOPAttributedMessage: 0
X-Forefront-Antispam-Report:
CIP:193.188.128.10;IPV:NLI;CTRY:LB;EFV:NLI;SFV:SPM;SFS:(10019020)(6009001)(376002)(39860400002)(346002)(2980300002)(199003)(189002)(54356999)(75432002)(8936002)(305945005)(6200100001)(786003)(8746002)(6862004)(6706004)(316002)(562354002)(189998001)(42882006)(246002)(16526017)(16576012)(7116003)(7416002)(356003)(6666003)(478600001)(53256004)(558084003)(104016004)(8676002)(5660300001)(74482002)(2906002)(47776003)(106466001)(7736002)(24736003)(88552002)(50986999)(23756003)(43066003)(50466002)(66066001)(2171002)(6116002)(250100001)(105596002)(33646002)(108616004)(3846002)(62346012);DIR:OUT;SFP:1501;SCL:5;SRVR:HE1PR0601MB2586;H:mail.aub.edu.lb;FPR:;SPF:SoftFail;PTR:keys.aub.edu.lb;A:1;MX:1;LANG:en;
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03FT032;1:Ni2n/oSHpbowalmpG6Xku7AT/sbC99E5dHsVmUcjpNgxumyWyj8yNNFmKObTdrRHEUOZijVR0vhIbBd4JEts3iKdYc+hejNKm/Axu9Xhjena/hwkzvFPuGp3V30cv+rd
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 48f71401-4736-4ecb-8b39-08d50463d7db
X-Microsoft-Antispam:
UriScan:;BCL:0;PCL:0;RULEID:(22001)(2017030254152)(2017052603199)(201703131423075)(201703031133081)(201702281549075);SRVR:HE1PR0601MB2586;
X-Microsoft-Exchange-Diagnostics:
1;HE1PR0601MB2586;3:jO7hZtY1ByOw24tmbJC2Dek0IDlKXAByEy1rscudJ3ucaD6hTsaPtGA+YuZ/AEJ6wPwwGNv46ON56BxneniNZwsjPfdwffrwTOO8hOh52YY2s0zprb1voBap/Xz+Xn/IowvDmUM/TURmWiBf5ha+n15WqFkK8w/5EI4irUUx0x9UGd80V9R7m9kCO8oeGTKpsfnX8MUBbLd4fOnMSf4KNCaxqaXK579Xeagute1mb0Tqm/06yoRXHgvvnP2vu4zeqdjvO+uIwUqDycvXcKRL+/8PCGLcGOwmzBcGOR9HOVKpghr8S0G4BshR3TZ6ndrmwtCSKWBfgPWBwWcLB2VS4VGMuXdK9LJHuA8/92yjn8M=;25:wQo1O5gHEI7daQsjlIA2K+ig6O9MAT8RCEQsYXjMKtp5GUf/qnTwdKnI6qy3mOA0hXb63LOxGKjznYLJ9CijqG2WgT8aAiDRhiA+ZRS21kk1BLmR7wz3bgMlYQM3xkMUrFT+ecyB+EUM742rtGIVfRL5L71BXyQ9xPXx3WrMZDDRdw4JHkd7klpuHtldEyep5FxXqqbCZvQQTIUJFxZzFfbmpyGoprvqt4ageK1pBkL50qAiXgeitmmZDrEjX6QDBpmYbvkVQ0Oy7+2QruNMC3p94Vz6G1KFC4DVA0anQ+O00hp5bAxDNMtnJgCbGWAYW928o1cL5S1poWyFL9s2Lg==
X-MS-TrafficTypeDiagnostic: HE1PR0601MB2586:
X-Microsoft-Exchange-Diagnostics:
1;HE1PR0601MB2586;31:ng1IGuwiwY/jRuA7ilTVdDAgFp2ihARu6FDLrDMwqAdpdpD1+Dw2rcCHzv+GCRECe9VpaSmDWNbVdAadCqcXZeEB9Q41Cq6NO2yuFbXrt/a93ip9357kmT1MyqgcojHrhDuhGot3a+cYUBSwEaDlBh5BMZPeuqXQhSNXF2U0l18EpYItr2+vveKdQIqWFfaQLU1g/GNEpFjg+bZzVAymAQnR1e7RmjJogGQJuprrQ2o=;20:lL+wvYjjAygZfacQlLpmou8gCE1Du1eV0DSD1gOfajn74tUBcezK5KmwVBbBtZ2PiKLykB2PYQdF7x6rKfW8C5kPLHfz5UPTK+fE/nwuywYWkf44RJ1aUWnd8GcoyERgSbr7gRMY1Dsvqel1GpQwVB7OnKq7gx+qaBkM5HhqXdTxuZ13uEV+V/0zHFde3yJ6JrekadrkDP2AIoCrb52XDbMwv/SKQpIgHq/Ivgd0iK4JzjrRWKkg48tcpVF9I/CRNnYADq81VhLmfrD7eIGfB+aEsGzZUUDkGdgl8Qtauy7s6Snv8vWPhRIkLSQDacMrR+VDQy5Y7u4cUhZvY8vCdr074Z62Hh7NyZgyo7kmfatmWgcgGmK9lLUsisnXRj1vvkEX7rW3HQYreuVUlamiVZXBtdN5ktXZmjY5DSQFPUAPgokgzvCtsJXQKF/tD1YHnOOkwCOlHKTBff3SopWfCYVmbG9j6tDbzhxS2qeLhv0g9fGHSfVbyMvDlnvDKiTa
X-Exchange-Antispam-Report-Test: UriScan:;
X-Microsoft-Antispam-PRVS:
<HE1PR0601MB258675F41D16BDFBEFED0E10AC7A0@HE1PR0601MB2586.eurprd06.prod.outlook.com>
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(100000703101)(100105400095)(93006095)(93003095)(10201501046)(3002001)(6041248)(20161123562025)(20161123555025)(20161123560025)(20161123564025)(20161123558100)(201703131423075)(201702281529075)(201702281528075)(201703061421075)(201703061406153)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:HE1PR0601MB2586;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:HE1PR0601MB2586;
X-Microsoft-Exchange-Diagnostics:
1;HE1PR0601MB2586;4:fBRQl4i9LWF1Zm+rRC8bdljWUT9GFsbQAAOH/O2j2cS5LQsSIlBE5AlyL13K31I+9S2RJzHEfaTH3wh3ja2vlERTq3/bEyB17bHcBPtzRHQTisrV8FeBLtVd/+Vo4LTpWm2iopDc+3t2PFi8yPDS7Xf34YVgt5Y2jAP4ekkAV2n1kIvaAdeylZBQM6HGf57A2quUxoNTs13n6D2M2jwbhnqtmxrIZ3VH0myauCyDSuCBa8UpWONjfNbi6diMexca
X-Forefront-PRVS: 04410E544A
X-Microsoft-Exchange-Diagnostics:
=?iso-8859-1?Q?1;HE1PR0601MB2586;23:zfcivj/0kuvNW7GdL7JP5puxA2wl315CMTGL5?=
=?iso-8859-1?Q?WkluOncyRClEnti56GCCyCaXUDNVBqig+3WV+7jXuiH4qogr4oNAp92Scn?=
=?iso-8859-1?Q?wGOg1D5WVLjxz7VUcIe6ag6FSozzxBetu7jl4wn7aT8XDbxgJsbuffptww?=
=?iso-8859-1?Q?iV5lJhY8goNbtEqdUDjoaSRbDTngnIOl72yRdvJKbI/vPA6FDqnjIEqCgw?=
=?iso-8859-1?Q?08YE1bwGVDeuEO3vZ7X/mKzsxfwduybPaBY25ru8ZDosEhLKUFx4yoEnTK?=
=?iso-8859-1?Q?EVvxKUSdWhoaLZCFjSYQyEk49rnLfyHnHkcR5WalWcXZ6dw+QvBGV+cAem?=
=?iso-8859-1?Q?quFrScQwoUa8V9tRMJ9+Q8/42TmiIQxtugMUV3W4tz4YUg08Uc7uHfi0zi?=
=?iso-8859-1?Q?X//gGvEH7rmHRJ7bJr12rkEx9kRZlFNetEtM4vddA2C3U6nUgnpe4pbrR8?=
=?iso-8859-1?Q?SOYyaNOV7P4wXWzV3gw47WLRW9JfAxLQi9JEmBqUkq9irzHiQwl7uTls4L?=
=?iso-8859-1?Q?yLRNWpSQ22+npiGjgJLkyjPPPcg7ZIS9cN7CL2aRwfGmq4uIQ2fr9g3N4F?=
=?iso-8859-1?Q?HYgvUoa7miUweEXyhXx4lMaCgf0/j4EqlIEPcPUfowOQnv0qhECBDJ6VoM?=
=?iso-8859-1?Q?JzI9WZF4TG3PSPR++ucB2Hu6AvUAFhHTb9wkqYipM36GQtCx8tBNu65E2A?=
=?iso-8859-1?Q?OEbIJrGcNtGTPcnTRWufZOas6cjiBIduC/VKlE58xaZPCXkK9aUKYoqnyW?=
=?iso-8859-1?Q?CP+WZvqTs8WtIFsvPuJ4CCmeyIhlj2xHzlRBZazPhq9OV25Tao+seIXXu3?=
=?iso-8859-1?Q?DyQD/I22q0D0oCKfJX/t03kNivCBFl5klZuYrP/72RlGoWPATET5fInnud?=
=?iso-8859-1?Q?RTV92A4q+0t/N6dB/06dmkv4JsRj3zYiiRO9sfCHJI5tl9Y+K3nrm09x29?=
=?iso-8859-1?Q?WWbr/EDn2n4CEx8wpEe5oMe8+RVv6u2tBr02/hKG6JSAutWRy10NGNnwwC?=
=?iso-8859-1?Q?DNJf9izgKGdACSdQ50cr0itvzhaAbLHTaLWp+SZtrq1QqsYk2vWmRNGlI8?=
=?iso-8859-1?Q?CyAPjrSehoQ6HXMsH5RHOiemTrbZhUoiYYLXxJG6JNXrEl3OXR+U5Hd3jm?=
=?iso-8859-1?Q?5GK/HP3Gif65Dcx/4mJZlHv/HbmLQj3/xl9CIrYWUAdFV+pqnbRDo6YQrg?=
=?iso-8859-1?Q?IypsOlfXpNHqjXRQbmIz+Z891FXUj3ryW5ED1efwY/lAbPhRUBwuSstDa7?=
=?iso-8859-1?Q?wqjiPX+Z29VMk0haM7WE1rX6agG2Bd/rH6n1u9VBYQnWrAiQ9ZPXwyWnDA?=
=?iso-8859-1?Q?cR54=3D?=
X-Microsoft-Exchange-Diagnostics:
1;HE1PR0601MB2586;6:wfhQt58AZkkBvUN0hwJLGT1VnQhsymKwMzmtEpLHsTouB9Ow7roCot1JLrWRbc47HNl/NituaTwZUNr7dwfNdVf3SvOaeMdP7/2mEaWDcmE2oFh2VfgiHpq/GO3QJzXNIirZ9eluEK9ILYtej9ubXEQ5+KZaZvwrkGI2cCe5wN3ux58jhQE5pGa2pcQmjB9Budt34quNK0EQLAURG51UP0gW0GGM4QtJ5QWWqtmq97im8cw3zgfC9GDppNx39MF+XvHcXX7lQNhvb9s4tmvZ8LeKC5NsZYHXplSpbh5XyD1PbeV1oFbT+/1sbzg3eVuJsHbH7eMU4JCV6QRrsEs4xA==;5:qwznnp0hz3veD/ynNrrGW249SZV1wISio8oofqIuadIo1Ik52yCbJy9rGK6Sf3dXZgakURhkhzRkwuKFQcpOhL9FceGDowJgwn2x7Cj94HErQtLB1FE42bTKrRxSGM5wQCOHO0m39YHcADE9a2Amyg==;24:VvbZem9K5wdncuihGuRXFYqGEVeejx11FMgJVlGJFOVFJKl2aFa0A0nkgnkCyFyJWVIKPJzMFG+Aa+Vy78THlg==;7:th/wswwYXqBs2/bArxBAhzjkGNDNEWLsLN3LEoTpZDOqZlmt6oqVbgAi3P/RoB74Vve8dGu12+SSXFrh4jCfSVSgGO8XQHgN3QdNbMtfOzjjGjqV8ADXLHEvQmZz5tzM+R7L6VJKA8PMwMeA8JHNgY5qB03D5Qj6de6pGNNH0WN0ZP15uIt0pRCjxuBVQtq6szDhGJDkE24ciIyJQKC/BUM01s5hzAy4t1kFIyQa3Hk=
SpamDiagnosticOutput: 1:22
X-OriginatorOrg: aub.edu.lb
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Sep 2017 22:22:00.9431
(UTC)
X-MS-Exchange-CrossTenant-Id: c7ba5b1a-41b6-43e9-a120-6ff654ada137
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c7ba5b1a-41b6-43e9-a120-6ff654ada137;Ip=[193.188.128.10];Helo=[mail.aub.edu.lb]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0601MB2586
X-Spam-Status: Yes, score=12.2
X-Spam-Score: 122
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: David & Maureen picked you for $850.000.00 Donation, Kindly
reply for details and claim. [...]
Content analysis details: (12.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[104.47.2.210 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.8 SUBJ_DOLLARS Subject starts with dollar amount
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[104.47.2.210 listed in dnsbl.sorbs.net]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** $850.000.00 Donation
David & Maureen picked you for $850.000.00 Donation, Kindly reply for details and
claim.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
